Tuesday, 2023-04-25

opendevreviewChing Kuo proposed opendev/system-config master: Update accessbot to Use Python 3.11 Base Images  https://review.opendev.org/c/opendev/system-config/+/88116103:30
opendevreviewChing Kuo proposed opendev/system-config master: Update Hound to Use Python 3.11 Base Images  https://review.opendev.org/c/opendev/system-config/+/88090803:32
opendevreviewChing Kuo proposed opendev/system-config master: Update Hound to Use Python 3.11 Base Images  https://review.opendev.org/c/opendev/system-config/+/88090803:35
*** amoralej|off is now known as amoralej06:12
*** amoralej is now known as amoralej|lunch12:07
fungiand there's the wiki.o.o cert warning e-mail12:13
fungiright on schedule12:13
fricklerhmm, I was always assuming gerrit creates review IDs sequentially, but now https://review.opendev.org/c/openstack/requirements/+/881433 was created a couple of minutes after https://review.opendev.org/c/openstack/requirements/+/881466, but still has a lower number12:42
*** amoralej|lunch is now known as amoralej13:12
Clark[m]frickler: it grabs them in blocks of like ~10 and I think different threads may own a different block?14:00
fricklerClark[m]: that's likely newish then, like changed in recent years?14:04
fungiif memory serves, in 3.x they stopped promising that the change numbers would necessarily even remain unique (though they have done so far, at least as long as you only have a single active gerrit server)14:05
fungiwhich was the reason they started including the project name in change urls14:06
Clark[m]Yes the change occurred with notedb since they stopped being able to rely on a SQL counter incrementing automatically 14:09
clarkbLooks like our vexxhost backup server needs pruning14:56
*** iurygregory_ is now known as iurygregory15:00
fungiyep, it's been complaining for the past few days, inching up slowly15:01
fricklerfungi: you mentioned to drop "use-storyboard: true" for project retirements, should that be added for https://review.opendev.org/c/openstack/project-config/+/880220/1/gerrit/projects.yaml too?15:10
fungiit can be. saves doing cleanup later. i should do a pass through the repos with retired/read-only acls and check to see if any had use-storyboard removed earlier but weren't set to inactive in the sb database15:11
fricklero.k., I'll add a comment for gmann15:13
fungiif we're doing general cleanup of project entries during retirement, removing the "groups" from them would also make sense. should really be stripped down to a description and an acl15:14
clarkbinfra-root I just created a quay.io app for opendevorg, used it to test the ensure-quay-repo role (it works! locally anyway), then deleted the app and the repo it created. THe quay usage log should reflect this and wanted to call it out here as actions that I took intentionally if anyone saw it and thought it looked weird16:10
clarkbcorvus: thinking about the ensure-quay-repo in opendev/base-jobs idea a bit more: One approach would be to update the container_images input to include a registry_implementation attribute and set that to quay or docker etc. Then have the role only operate on those where this value is set to quay. Then we could add it straight into base jobs and it should just work.16:31
clarkbcorvus: I like that appraoch because it means we can continue to use the container_images values consistently across jobs. What do you think?16:31
*** amoralej is now known as amoralej|off16:36
gmannfrickler: fungi ack, will update16:41
opendevreviewGhanshyam proposed openstack/project-config master: Retire patrole projects: remove project from infra  https://review.opendev.org/c/openstack/project-config/+/88022017:50
gmannfrickler: fungi ^^17:50
opendevreviewMerged openstack/project-config master: Retire patrole projects: remove project from infra  https://review.opendev.org/c/openstack/project-config/+/88022018:09
opendevreviewIan Wienand proposed openstack/project-config master: Indent Gerrit ACL options  https://review.opendev.org/c/openstack/project-config/+/87990619:19
opendevreviewIan Wienand proposed openstack/project-config master: tools/normalize_acl.py: Add some human readable output  https://review.opendev.org/c/openstack/project-config/+/88089819:19
opendevreviewMerged opendev/system-config master: inventory : add Ubuntu Jammy DNS refresh servers  https://review.opendev.org/c/opendev/system-config/+/88057919:19
ianwinfra-prod-base https://zuul.opendev.org/t/openstack/build/6808ef87e9124d8ab9fb535066186357 : FAILURE in 8m 32s20:10
ianwbummer, the ns changes didn't apply20:10
ianwafsdb01.openstack.org      : ok=0    changed=0    unreachable=1    failed=0    skipped=0    rescued=0    ignored=020:12
ianwweird host to fail20:12
ianwi see nothing in it's log, and bridge can connect 20:18
fungiianw: wrong host key maybe?20:24
fungioh, that's bridge to server, not zuul to bridge20:25
fungistill, https://review.opendev.org/880661 would be nice to land20:25
corvusclarkb: sorry missed that earlier; as replied in meeting, yes i think that is best, but also we should only have it run if the api key is there so that it's optional but automatic if present20:25
corvus(just restating here ftr)20:25
ianwfungi: hrm, just double checking that ... "curl https://zuul.opendev.org/api/tenant/opendev/project-ssh-key/opendev/zone-gating.dev.pub" ... is it not opendev?20:40
ianw(that 404's)20:41
ianwcurl https://zuul.opendev.org/api/tenant/opendev/project-ssh-key/opendev/zone-zuul-ci.org.pub does not, for example20:42
ianwit does not show up as an opendev project -> https://zuul.opendev.org/t/opendev/projects20:51
fungiianw: opendev/zone-gating.dev is in the openstack tenant20:52
opendevreviewMerged opendev/system-config master: Allow opendev/zone-gating.dev project on bridge  https://review.opendev.org/c/opendev/system-config/+/88066120:53
ianwok i will not think too much about this :)20:55
ianwanyway, good call, i will watch this next base run20:56
ianwthat passed.  so i will also not think too much about the afsdb01 failure either, i guess just got lucky with network issues21:02
ianwbackup prune is done21:03
ianw1007G  629G  379G  63%21:03
clarkbianw: thank you22:02
clarkbcorvus: great I'm just sitting back down now and will be looking at making those changes momentaril22:02
ianwok, we've deployed nsd on ns03/ns04 and everything remains happy.  i'll watch through https://review.opendev.org/c/opendev/system-config/+/880706 which should bring them live22:09
clarkbianw: ack22:13
clarkbI'm going to do simialr with quay to what I did earlier today and create a temporary app and use that to test the updates described above to the role22:13
opendevreviewClark Boylan proposed zuul/zuul-jobs master: Update ensure-quay-repo to run opportunistically  https://review.opendev.org/c/zuul/zuul-jobs/+/88152122:23
opendevreviewMerged opendev/system-config master: dns : add Jammy refresh servers  https://review.opendev.org/c/opendev/system-config/+/88070622:27
opendevreviewClark Boylan proposed opendev/base-jobs master: Run ensure-quay-repo in our base container jobs  https://review.opendev.org/c/opendev/base-jobs/+/88152222:29
opendevreviewClark Boylan proposed opendev/system-config master: WIP Base jobs for quay.io image publishing  https://review.opendev.org/c/opendev/system-config/+/88128522:31
clarkbcorvus: ^ ok I thik that stack of three changes does what I described in the meeting22:32
ianwclarkb: i think having the api type in there is probably good, but perhaps we should also update https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/remove-registry-tag/README.rst?display=source#L77 so it works the same?23:09
clarkbianw: ya just set them all to registry_type so that it is consistent and generic?23:13
clarkbdo you want me to push that up?23:13
ianwfeel free; i think that this is so new changing it won't be a problem at this point23:13
ianwbetter to have consistency23:13
opendevreviewClark Boylan proposed zuul/zuul-jobs master: Use consistent registry_type var name across roles  https://review.opendev.org/c/zuul/zuul-jobs/+/88152423:19
clarkbsomething like that?23:19
ianwclarkb: i wonder if we should put it in container_registry_credentials?23:25
clarkbhrm ya that could work since its part of the registry itself and not the image23:25
clarkbI'll probably have to pick that refactor up in the morning though. But feel free to -1 both changes and give that suggestion I think that is a good way to do it23:26
ianwwe could basically autoguess is ^quay.io/.*$, but if you're running your own private quay you'd have to explicitly specify "this uses the quay api"23:26
ianwi imagine we could also add artifactory, etc., but it would be a central point23:26
clarkbya and ther are many more implementations out there at this point too23:27
ianwdig @ns03.opendev.org opendev.org seems to work for me23:35
clarkbagreed I can resolve opendev.org records against that host23:36
ianwyep per matrix i've done a manual xfer on both ns03 & ns04 just to ensure everything; both have pulled the 5 zones we manage23:47

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!